Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa
File:                     2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa (raw, json)
Hash identifier:          CGaVZ2ki+MUnmpyJNECwaLMCFYxcOghJzsDVNwRvCtQ=
Subject key identifier:   D4:BC:E5:67:87:53:86:57:BD:DB:70:0B:55:41:26:FC:91:98:2D:6F
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F43285848E16BDD8A60420CFB147B9F00
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     32097
IP address blocks:        208.110.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:dd:8a:60:42:0c:fb:14:7b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=cee5ee8f-beeb-478a-9d5f-4c8cd488f609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:a8:61:d7:3f:fc:46:21:35:02:ba:27:1b:
                    26:d8:0c:5e:b9:52:bc:9b:1f:d0:fc:60:cb:12:7b:
                    5e:5f:b7:94:86:c5:b1:ef:ac:84:23:85:1f:51:ff:
                    a7:86:e4:05:e8:fa:bd:fa:c0:7c:a2:34:c5:71:b7:
                    59:73:77:9e:be:93:a4:ab:a4:f5:45:44:bc:66:21:
                    e1:61:d5:b1:76:9f:b4:ae:8c:2c:18:8d:95:c6:5d:
                    8c:e1:05:5f:93:f8:0a:e1:1d:2a:50:20:46:f4:62:
                    dd:e1:51:bd:46:bc:d1:2d:7c:8d:d3:e2:f6:b0:be:
                    70:29:5b:b6:84:fc:fc:f3:81:6e:22:4e:48:65:3b:
                    06:eb:28:6e:d6:c9:42:f1:2b:32:00:97:fe:ca:b3:
                    78:77:f4:db:d6:01:6b:5a:ec:0d:a0:59:1c:29:99:
                    a0:74:9a:3a:ed:30:c2:52:3e:01:d3:10:13:78:ce:
                    9d:c1:c9:72:f2:f6:e8:7f:59:da:8b:47:fc:d7:50:
                    3f:cc:c0:19:e3:7f:a3:37:04:76:7a:3b:4b:4a:56:
                    75:af:6a:aa:54:5d:b7:d1:1d:6a:fa:22:7d:9c:77:
                    8d:29:a6:1d:2b:aa:8f:8e:2f:a7:48:05:0c:c0:74:
                    7b:7a:9b:03:07:49:11:f8:63:ad:da:2a:bf:af:4d:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:E5:67:87:53:86:57:BD:DB:70:0B:55:41:26:FC:91:98:2D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:a2:f8:40:6a:40:35:ed:b8:f3:3b:fd:f1:2e:c8:cb:46:
         62:d9:30:d9:76:8f:1f:ec:36:b3:db:6f:6b:ca:9c:b9:c0:ea:
         a5:ec:e5:b9:9f:47:f8:a9:b5:36:64:53:0e:95:80:ff:75:c4:
         cd:b4:02:5f:51:51:9c:10:21:95:86:fe:a9:44:b2:c5:42:02:
         e2:6e:e7:0b:d7:4c:34:68:df:69:23:b6:8f:dd:7e:ab:1c:dd:
         b8:1e:03:e4:48:95:4a:8e:18:cf:96:d3:26:40:4a:b8:d7:e9:
         f8:b6:67:70:ed:48:f9:00:fa:bd:1e:c5:14:c9:b0:84:74:ee:
         8a:0f:7c:a3:d7:ba:b8:c1:1d:2a:19:04:f6:56:b3:f1:5e:d7:
         fc:e0:bb:cc:7b:9f:97:f7:8f:b1:99:65:33:f2:78:cd:07:ca:
         22:90:9b:eb:85:4e:5f:fb:75:bd:36:86:c5:7f:ab:59:a4:63:
         1e:05:28:91:55:c0:54:5e:f9:bf:0a:d0:8e:d1:e1:2b:4d:d2:
         4c:18:b7:a9:98:20:9f:23:e3:18:de:23:b9:af:8f:2f:cc:4f:
         22:df:7a:80:ab:41:a6:2f:8f:49:ee:4d:68:72:ab:77:1b:66:
         22:69:1c:9d:b3:64:b1:f0:25:23:c8:94:72:52:da:af:59:0b:
         4f:1f:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:52 2025 by rpki-client